@pushary/agent-hooks 0.54.0 → 0.55.0

package/dist/bin/pushary-claude.js

@@ -16,14 +16,14 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   redactSecrets
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-P5VOLS3Q.js";
 import {
   getApiKey,
   getBaseUrl
@@ -529,7 +529,7 @@ var createRemoteApprover = (deps) => {
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
       if (modeState.kill) return deny("Stopped by user \u2014 this agent was halted from Pushary");
       const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code");
-      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input);
+      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input, deps.cwd);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return allow(input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") {
         return deny(`Denied by policy for ${policy.tool}`);
@@ -1341,6 +1341,7 @@ var runDualMode = async (binary, args2, startingMode) => {
     apiKey,
     machineId,
     projectName,
+    cwd: process.cwd(),
     getSessionId: () => sessionId
   });
   const initialModeState = await fetchModeState(apiKey).catch(() => null);

package/dist/bin/pushary-clean.js

@@ -6,15 +6,15 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-2VW2FEYC.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-T2EEBR2D.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-PSZAXNUB.js";
+import "../chunk-P5VOLS3Q.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -31,21 +31,21 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-P5VOLS3Q.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -194,7 +194,7 @@ var decidePermissionRequest = async (input) => {
         if (toolPolicy.mode === "push_only") markApproved(input.tool_use_id);
         return codexAllow();
       }
-      return codexDeny(denyReasonFrom(answer.value));
+      return codexDeny(denyReasonFrom(answer.value, answer.note));
     }
     savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
     if (toolPolicy.mode === "push_first") return codexPass();
@@ -251,7 +251,7 @@ var decidePreToolUse = async (input) => {
       }
       if (answer.answered) {
         if (isDeferAnswer(answer.value)) return codexPass();
-        return answer.value === "yes" ? codexPass() : codexDeny(denyReasonFrom(answer.value));
+        return answer.value === "yes" ? codexPass() : codexDeny(denyReasonFrom(answer.value, answer.note));
       }
       savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
       if (clampCut) return codexPass();

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -11,18 +11,18 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-2VW2FEYC.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   readLedgerSummary
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-UXIAIMSS.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -23,21 +23,21 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-P5VOLS3Q.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -159,7 +159,7 @@ var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction
   }
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return geminiPass();
-    return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
+    return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value, answer.note));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
   if (clampCut) return geminiPass();
@@ -181,7 +181,7 @@ var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
   if (noDevices) return geminiPass();
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return geminiPass();
-    return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
+    return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value, answer.note));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
   return geminiPass();

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-XKXF2G7T.js";
+import "../chunk-PSZAXNUB.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-notification-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-notification-hook.ts

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-XKXF2G7T.js";
+import "../chunk-PSZAXNUB.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-denied-hook.ts

package/dist/bin/pushary-permission-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-XKXF2G7T.js";
+import "../chunk-PSZAXNUB.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-2VW2FEYC.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-T2EEBR2D.js";
+} from "../chunk-PSZAXNUB.js";
 import {
   reportEvent
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-WYQSLB7K.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-UXIAIMSS.js";
+import "../chunk-P5VOLS3Q.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-T2EEBR2D.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-PSZAXNUB.js";
+import "../chunk-P5VOLS3Q.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-PZWZ77QH.js → chunk-2VW2FEYC.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-P5VOLS3Q.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-SWNBIHDX.js → chunk-H6RGO7DN.js}

@@ -9,14 +9,14 @@ import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   classifyDecisionRisk,
-  extractPolicyArg,
   isApprovalMode,
   isSafeReadOnlyCommand,
   matchRankWeight,
-  matchToolPattern,
+  matchToolPatternAny,
+  policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-P5VOLS3Q.js";
 import {
   getApiKey,
   getBaseUrl
@@ -96,12 +96,12 @@ var getPolicy = async (apiKey, expectedVersion, agent) => {
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var findBestMatch = (policies, toolName, arg) => {
+var findBestMatch = (policies, toolName, args) => {
   let best;
   let bestWeight = 0;
   let bestLength = -1;
   for (const candidate of policies) {
-    const rank = matchToolPattern(candidate.tool, toolName, arg);
+    const rank = matchToolPatternAny(candidate.tool, toolName, args);
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
     const length = rank === "prefix" ? candidate.tool.length : -1;
@@ -120,18 +120,20 @@ var autoApprove = (tool) => ({
   mode: "terminal_only",
   pushFirstSeconds: 0
 });
-var resolveAutoResolveOrigin = (config, toolName, toolInput) => {
-  const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
-  const match = findBestMatch(config.policies, toolName, arg);
+var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = findBestMatch(config.policies, toolName, args);
   const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     return "safe_readonly";
   }
   return "policy_timeout";
 };
-var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
-  const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
-  const match = findBestMatch(config.policies, toolName, arg);
+var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = findBestMatch(config.policies, toolName, args);
   let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
     tool: toolName,
     timeoutSeconds: config.defaultTimeoutSeconds,
@@ -745,12 +747,12 @@ var readFreshCachedPolicy = (apiKey) => {
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
   return cached;
 };
-var deriveDecisionSource = (toolName, toolInput, liveMode) => {
+var deriveDecisionSource = (toolName, toolInput, liveMode, cwd) => {
   try {
     if (liveMode.kill) return "terminal";
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd);
     if (resolved.timeoutSeconds === 0 && resolved.timeoutAction === "approve") return "policy_auto";
     if (resolved.mode === "push_only" || resolved.mode === "push_first") return "human";
     return "terminal";
@@ -758,15 +760,15 @@ var deriveDecisionSource = (toolName, toolInput, liveMode) => {
     return void 0;
   }
 };
-var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode) => {
+var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, cwd) => {
   try {
     if (liveMode.kill) return void 0;
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd);
     if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
     return {
-      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput),
+      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput, cwd),
       toolName,
       toolTarget: deriveToolTarget(toolName, toolInput)
     };
@@ -846,8 +848,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
-    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode) : void 0;
+    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, input.cwd);
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, input.cwd) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       agentType: agent.type,

package/dist/{chunk-SY3NBF67.js → chunk-P5VOLS3Q.js}

@@ -21,6 +21,71 @@ var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + ho
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
 var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
+var GLOB_MAX_WILDCARDS = 8;
+var GLOB_MAX_ARG_LENGTH = 4096;
+var GLOB_CACHE_MAX = 256;
+var tokenizeGlob = (glob) => {
+  let stars = 0;
+  for (const char of glob) if (char === "*") stars += 1;
+  if (stars > GLOB_MAX_WILDCARDS) return void 0;
+  const tokens = [];
+  let literal = "";
+  const flush = () => {
+    if (literal.length > 0) {
+      tokens.push({ kind: "literal", value: literal });
+      literal = "";
+    }
+  };
+  for (let i = 0; i < glob.length; i += 1) {
+    if (glob[i] !== "*") {
+      literal += glob[i];
+      continue;
+    }
+    flush();
+    if (glob[i + 1] === "*") {
+      tokens.push({ kind: "globstar" });
+      i += 1;
+      continue;
+    }
+    tokens.push({ kind: "star" });
+  }
+  flush();
+  return tokens;
+};
+var SLASH = "/".charCodeAt(0);
+var matchGlobTokens = (tokens, text) => {
+  const n = text.length;
+  let reachable = new Uint8Array(n + 1);
+  reachable[0] = 1;
+  for (const token of tokens) {
+    const next = new Uint8Array(n + 1);
+    if (token.kind === "literal") {
+      const { value } = token;
+      for (let p = 0; p <= n - value.length; p += 1) {
+        if (reachable[p] && text.startsWith(value, p)) next[p + value.length] = 1;
+      }
+    } else {
+      const spansSeparators = token.kind === "globstar";
+      let open = 0;
+      for (let p = 0; p <= n; p += 1) {
+        if (!spansSeparators && p > 0 && text.charCodeAt(p - 1) === SLASH) open = 0;
+        if (reachable[p]) open = 1;
+        if (open) next[p] = 1;
+      }
+    }
+    reachable = next;
+  }
+  return reachable[n] === 1;
+};
+var globCache = /* @__PURE__ */ new Map();
+var compiledGlob = (glob) => {
+  const cached = globCache.get(glob);
+  if (cached !== void 0 || globCache.has(glob)) return cached;
+  const compiled = tokenizeGlob(glob);
+  if (globCache.size >= GLOB_CACHE_MAX) globCache.clear();
+  globCache.set(glob, compiled);
+  return compiled;
+};
 var matchToolPattern = (pattern, toolName, arg) => {
   const open = pattern.indexOf("(");
   if (open === -1 || !pattern.endsWith(")")) {
@@ -31,19 +96,65 @@ var matchToolPattern = (pattern, toolName, arg) => {
   if (inner.endsWith(":*")) {
     return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
   }
+  if (inner.includes("*")) {
+    if (arg.length > GLOB_MAX_ARG_LENGTH) return "none";
+    const compiled = compiledGlob(inner);
+    return compiled && matchGlobTokens(compiled, arg) ? "prefix" : "none";
+  }
   return arg === inner ? "exact" : "none";
 };
-var POLICY_ARG_KEYS = {
-  Bash: "command",
+var POLICY_PATH_KEYS = {
+  Read: "file_path",
   Edit: "file_path",
-  Write: "file_path"
+  Write: "file_path",
+  MultiEdit: "file_path",
+  NotebookEdit: "notebook_path",
+  LS: "path"
+};
+var POLICY_COMMAND_KEYS = {
+  Bash: "command",
+  PowerShell: "command",
+  Monitor: "command"
 };
+var POLICY_ARG_KEYS = { ...POLICY_COMMAND_KEYS, ...POLICY_PATH_KEYS };
 var extractPolicyArg = (toolName, toolInput) => {
   const key = POLICY_ARG_KEYS[toolName];
   if (!key) return void 0;
   const value = toolInput[key];
   return typeof value === "string" ? value : void 0;
 };
+var normalizeSeparators = (value) => value.replace(/\\/g, "/");
+var isAbsolutePath = (value) => value.startsWith("/") || /^[A-Za-z]:\//.test(value);
+var relativeToCwd = (path, cwd) => {
+  const base = normalizeSeparators(cwd).replace(/\/+$/, "");
+  if (!base) return void 0;
+  const prefix = `${base}/`;
+  if (!path.startsWith(prefix)) return void 0;
+  const rest = path.slice(prefix.length);
+  return rest.length > 0 ? rest : void 0;
+};
+var policyArgForms = (toolName, toolInput, cwd) => {
+  const raw = extractPolicyArg(toolName, toolInput);
+  if (raw === void 0) return [];
+  if (!(toolName in POLICY_PATH_KEYS)) return [raw];
+  const forms = [raw];
+  const normalized = normalizeSeparators(raw);
+  if (normalized !== raw) forms.push(normalized);
+  if (cwd && isAbsolutePath(normalized)) {
+    const relative = relativeToCwd(normalized, cwd);
+    if (relative !== void 0) forms.push(relative);
+  }
+  return forms;
+};
+var matchToolPatternAny = (pattern, toolName, args) => {
+  if (args.length === 0) return matchToolPattern(pattern, toolName);
+  let best = "none";
+  for (const arg of args) {
+    const rank = matchToolPattern(pattern, toolName, arg);
+    if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
+  }
+  return best;
+};
 var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
   "ls",
   "pwd",
@@ -582,8 +693,8 @@ export {
   hookWaitClamped,
   effectiveWaitSeconds,
   matchRankWeight,
-  matchToolPattern,
-  extractPolicyArg,
+  policyArgForms,
+  matchToolPatternAny,
   isSafeReadOnlyCommand,
   isValidApiKey,
   ACTION_BODY_MAX,

package/dist/{chunk-T2EEBR2D.js → chunk-PSZAXNUB.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-P5VOLS3Q.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-WYQSLB7K.js → chunk-UXIAIMSS.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-P5VOLS3Q.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-SVRDT5PP.js → chunk-XKXF2G7T.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-T2EEBR2D.js";
+} from "./chunk-PSZAXNUB.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -23,20 +23,20 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-SWNBIHDX.js";
+} from "./chunk-H6RGO7DN.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-WYQSLB7K.js";
+} from "./chunk-UXIAIMSS.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-P5VOLS3Q.js";
 import {
   getApiKey,
   getBaseUrl
@@ -395,7 +395,7 @@ var handlePreToolUse = async (input) => {
     if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
       return allow();
     }
@@ -442,7 +442,7 @@ var handlePermissionRequest = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);

package/dist/src/index.d.ts

@@ -28,7 +28,7 @@ interface ReceiptMeta {
 
 declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
-declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
+declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>, cwd?: string) => ToolPolicy;
 interface ModeState {
     readonly mode: ApprovalMode | null;
     readonly kill: boolean;

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-XKXF2G7T.js";
+import "../chunk-PSZAXNUB.js";
 import "../chunk-YHG74UFF.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-H6RGO7DN.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-UXIAIMSS.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-P5VOLS3Q.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.54.0",
+  "version": "0.55.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",